Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

joomshaper.com vulnerabilities

42 published CVEs name joomshaper.com among the affected products.

Published CVEs
42
Last 12 months
42
Critical
7
Known exploited
0

Critical 7High 21Medium 14Low 0Not scored 0

Newest CVEs

  • CVE-2026-103419

    Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.

    joomshaper.com · Helix Ultimate extension for Joomla

    High8.6
  • CVE-2026-105602

    Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

    joomshaper.com · Helix Ultimate extension for Joomla

    High8.6
  • CVE-2026-102426

    Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2

    joomshaper.com · SP Page Builder (Pro) extension for Joomla

    Medium5.3
  • CVE-2026-90903

    Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0

    joomshaper.com · Easy Store extension for Joomla

    High7.2
  • CVE-2026-90901

    Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0

    joomshaper.com · Easy Store extension for Joomla

    High8.6
  • CVE-2026-90905

    Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0

    joomshaper.com · Easy Store extension for Joomla

    High7.2
  • CVE-2026-90902

    Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0

    joomshaper.com · Easy Store extension for Joomla

    High8.6
  • CVE-2026-90904

    Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0

    joomshaper.com · Easy Store extension for Joomla

    High8.6
  • CVE-2026-90899

    Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0

    joomshaper.com · Easy Store extension for Joomla

    High8.2
  • CVE-2026-90900

    Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0

    joomshaper.com · Easy Store extension for Joomla

    Medium5.3